System-wide CA certificate

Hello,
I'm trying to install a system-wide CA certificate by putting it in
/etc/kde3/ksslcalist. This works only halfway. The CA shows up in the
crypto preferences for new users (with all appropriate check boxes
checked to indicate that the CA is trusted), but Konqueror still doesn't
trust sites using a certificate from this CA.
Instead, it shows a pop-up window when the site is accessed, saying that
the CA certificate is unknown and cannot be trusted.
What is the proper way to add a system-wide CA certificate?
Thanks,
Marcus